Categories: Trojan

How to remove “Trojan:Win32/BHO!pz”?

The Trojan:Win32/BHO!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/BHO!pz virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan:Win32/BHO!pz?


File Info:
name: 89112F49F6519C752209.mlwpath: /opt/CAPEv2/storage/binaries/40ab1aefd9618fa0242fb35a46f7b54c02067e39bfb1aae8cc8f6d20e62bf538crc32: 1CB07679md5: 89112f49f6519c752209e85157166e12sha1: 002c3ef75637cb54012537482a3204c42206deb9sha256: 40ab1aefd9618fa0242fb35a46f7b54c02067e39bfb1aae8cc8f6d20e62bf538sha512: b7d0f9ea0432ca6f6e0fee5ab302679a682047bb9d3709b0dcc993c3290344561468cedfc58f996935edd0bf1805e6c62bbd1326948cd8ad3d458466b4d151a7ssdeep: 3072:DV00/22Bcjs/+cpVuPiee+zdFlU6AzfUHhrkomsRiMqD1/HSEYaKqo6eJvlTVBmt:h00/223/1pVadTUPABwAiMq11YaE9Bmtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T182645A1232E0C976D39313766DD7E69662B2BD751E71928FB2603F2EA8341C6563330Esha3_384: 69ea70787b9b6b3b0825d745c3aa39bf182c28ca89ec512e38ae9fd36ea78bd6fca5504378e18d071a7a78316df539b8ep_bytes: 6a606870514300e8ba0a0000bf940000timestamp: 2010-09-26 11:48:20
Version Info:
FileVersion: 1.0.0.10024ProductVersion: 1.0.0.10024Translation: 0x0804 0x03a8

Trojan:Win32/BHO!pz also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.ljyA
DrWeb	Trojan.BhoSiggen.5496
MicroWorld-eScan	Gen:Variant.KillAV.6
FireEye	Generic.mg.89112f49f6519c75
CAT-QuickHeal	Trojan.BHO.CS4
Skyhigh	BehavesLike.Win32.Generic.fh
McAfee	GenericRXAA-AA!89112F49F651
Cylance	unsafe
VIPRE	Gen:Variant.KillAV.6
Sangfor	Suspicious.Win32.Save.ins
CrowdStrike	win/malicious_confidence_100% (W)
BitDefender	Gen:Variant.KillAV.6
K7GW	Trojan ( 004b9f941 )
K7AntiVirus	Trojan ( 004b9f941 )
BitDefenderTheta	Gen:NN.ZexaF.36792.sq0@a4FDF3cb
VirIT	Trojan.Win32.Generic.AQEA
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/BHO.OBP
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.BHO.cypp
Alibaba	Trojan:Win32/Darbyen.f68c1cf7
NANO-Antivirus	Trojan.Win32.BHO.cjdzu
ViRobot	Trojan.Win32.A.BHO.307200.E
Rising	Trojan.Generic@AI.100 (RDMK:km1JeKiqW5mOaYu6RnRq+g)
Sophos	Troj/Darbyen-A
F-Secure	Trojan.TR/BHO.Gen
Baidu	Win32.Trojan.BHO.n
Zillya	Trojan.BHO.Win32.12495
TrendMicro	TROJ_BHO.SMIH
Emsisoft	Gen:Variant.KillAV.6 (B)
Ikarus	Trojan.Win32.BHO
Jiangmin	Trojan/Generic.ocmj
Webroot	W32.Malware.Gen
Google	Detected
Avira	TR/BHO.Gen
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Win32.Unknown
Kingsoft	malware.kb.a.999
Microsoft	Trojan:Win32/BHO!pz
Xcitium	TrojWare.Win32.BHO.AR@26dh1v
Arcabit	Trojan.KillAV.6
ZoneAlarm	Trojan.Win32.BHO.cypp
GData	Win32.Trojan.PSE1.1JVNAG6
Varist	W32/KillAV.AK.gen!Eldorado
AhnLab-V3	Win-Trojan/Onlinegamehack21.Gen
VBA32	Trojan.BHO
ALYac	Gen:Variant.KillAV.6
DeepInstinct	MALICIOUS
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Lineage.LOE
TrendMicro-HouseCall	TROJ_BHO.SMIH
Tencent	Trojan.Win32.BHO.ds
Yandex	Trojan.GenAsa!hvMjShAUcnc
SentinelOne	Static AI – Malicious PE
Fortinet	W32/ZLob.AAAA!tr.dldr
AVG	Win32:BHO-ACI [Trj]
Cybereason	malicious.75637c
Avast	Win32:BHO-ACI [Trj]